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RECEIVED 
CENTRAL FAX CENTER 

AUG 1 3 2007 

IN THE CLAIMS; 

Please amend the claims as follows; 

1 . (Currently Amended) A data networking protocol comprising: 

one or more control commands employed by a respective network element to 
establish and manage simultaneous wireless communication sessions of a si»gie wireless 
subscriber unit end user termin al in a data network; and 

one or more mobility management attribute-value pair(s) (AVP) employed by the 
network element to define one or more parameters of an accompanying one or more of 
the control commands tho accompanying control command , to facilitate exchange of 
mobility information in the data network, and to facilitate secure mobility of wireless 
communication sessions including. 

a first AVP indicating whether a call is a new call or a handover and to be 
provided when initiating a session. 

a second AVP indicating a cookie-based session identifier and to be provided 
when the session is initiated, and 

a third AVP indicating a security module- generated session identifier and to be 
provided with the cookie-based session identifier . 

2-5, (Canceled) 

6. (Currently Amended) A data networking protocol according to claim I , 
wherein the mobility management A VPs further attribute value pair(s ) include a fourth 
AVP indicating an authentication challenge or challenge response and to be provided by 
an authentication AVP selectively invoked by ono or more network elements 
participating in a point-to-point communication session to authenticate one or more 
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network elements during a handoff of a communication session from one network 
element to another network element. 

7. (Currently Amended) A data networking protocol according to claim 6, 
wherein the fourth auth e ntication AVP is employed to authenticate an identity of a 
subscriber unit initiating handoff of a communication session from one servicing 
basestation to another servicing basestation, 

8. (Currently Amended) A data networking protocol according to claim 1 , 
wherein the mobility management A VPs further include a fifth AVP indicating; a security 
certificate and to be provided attribute value pair(a) includ e a c e rtification AVP 
se lectiv e ly invok e d b y a basestation element of a point-to-point communication session 
to obtain a security certificate from a network element when authenticating to 
auth e nticat e the basestation to requesting subscribers). 

9. (Currently Amended) A data networking protocol according to claim 8, 
wherein the fifth € ER ¥ AVP is selectively invoked by the basestation to a network 
access server (NAS), which solicits an updated certificate from a third-party certification 
agency on behalf of and for delivery to the basestation. 

10-11. (Canceled) 

12. (Currently Amended) The data networking protocol of claim 1 , wherein 
the first and second AVP follow mobility information compris e s at lea s t a portion of a 
communication s e ssion identifier that follows a communication session of a network 
element as it traverses through mobile communication link handoffs, the first and second 
AVP being used communication session identifi e r at least in part to implement mobility 
security features. 
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13. (Currently Amended) The data networking protocol of claim 12, wherein 
the first and second AVPs are communication session id e ntifi e r is used to authenticate a 
mobile communication link bandoff. 

14. (Currently Amended) The data networking protocol of claim 1, wherein 
the first and second AVPs attribute value pa ire comprise an extension of the Layer Two 
Tunneling Protocol (L2TP) and are employed to define one or more parameters of one or 
more existing L2TP control commands. 

15. (Canceled) 

16 : (Currently Amended) A data networking protocol according to claim 1 
ela i m - 1 -5, wherein the second AVP communicates a mobility management attribute value 
pair(s) includ e a COOKIE AVP to commun i cate the deterministic element of the 
communication session ID between one or more elements of a point-to-point 
communication session. 

17. (Currently Amended) A data networking protocol according to claim 1 
claim 15 , wherein the second AVP communicates a mobility management attribute value 
pair( s ) include a K_n AVP to communicate th e random element of the communication 
session ID between one or more elements of a point-to-point communication session. 

18-24, (Cancelled) 

25. (Currently Amended) A wireless end-user terminal, comprising: 

a transceiver an antenna to receive data transmissions for simultaneous wireless 

communication sessions; 

a wireless modem coupled with the transceiver antenn a, the modem having a 

communications agent lhat employs one or more control commands to establish and 
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manage simultaneous wireless communication sessions, the agent also to employ one or 
more mobility management attribute-value pair(s) (A VP) employed by th e n e two rk 
elem e nt t o define one or more parameters of an accompanying one or more of the control 
commands th e accompanying control command , to facilitate exchange of mobility 
information in a data network, and to facilitate secure mobility of the wireless 
communication sessions inching, 

a first AVP indicating whether a call is a new call or a handover and to be 
provided when initiating a session. 

a second A VP indicating a cookie-based session identi fier and to be provided 
when the session is initiated, and 

a third AVP indicating a security module- generated session identifier and to be 
provided with the cookie-based session identifier . 

26. (Cuuently Amended) The wireless end-user terminal of claim 25, 
wherein the mobility management A VPs further attribute valuo pair($) include a fourth 
AVP indicating an authentication challenge or challenge response and to be provided by 
an authentication AVP s e l e ctiv e ly invok e d by one or more network elements 
participating in a point-to-point communication session to authenticate one or more 
network elements during a handoff of a communication session from one network 
element to another network element. 

27. (Currently Amended) The wireless end-user terminal of claim 25, 
wherein the first and second AVP follow m obility information comprise;) at least q 
portion of a communication sess ion i d e ntifier that follow s a communication ^session of a 
network element as it traverses through mobile communication link handoffs, the first 
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and second A VP being used communication s e ssion id e ntifier at least in part to 
implement mobility security features. 

28. (Currently Amended) The wireless end-user terminal of claim 25, 
wherein the first and second A VPs are communication s e ssion ide ntifier i s used to 
authenticate a mobile communication link handoff. 

29. (New) The data networking protocol according to claim 1 > wherein the 
first AVP is used by a basestation to establi$h a new communication session through a 
network access server (NAS). 

30. (New) The data networking protocol according to claim 1, wherein the 
second and third AVPs are used by the NAS to reply to the basestation to establish the 
new communication session. 

31. (New) A method comprising: 

sending a control command from a network element to initiate a wireless 
communication session of a wireless subscriber unit in a data network, the control 
command including a first mobility management attribute- value pair(s) (AVP) to 
facilitate exchange of mobility information in the data network indicating whether a call 
is a new call or a handover; 

receiving a control command from a network element to initiate the wireless 
communication session, the control command including a second AVP indicating a 
cookie-based session identifier and a third AVP indicating a security module-generated 
session identifier to facilitate secure mobility of wireless communication sessions. 
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32. (New) The method according to claim 31 , further comprising sending a 
control command including a fourth AVP indicating an authentication challenge or 
challenge response from the network clement to authenticate the network element during 
a handoff of the communication session from one network element to another network 
element 

33. (New) A method according to claim 32, wherein the fourth AVP is 
employed to authenticate an identity of a subscriber unit initiating handoff of a 
communication session from one servicing basestation to another servicing basestation. 

34. (New) The method according to claim 3 1 , further comprising receiving a 
control command including a fifth AVP indicating a security certificate provided by a 
basestation element of a point-to-point communication session to obtain a security 
certificate from a network element when authenticating the basestation to requesting 
subscribers). 

35* (New) The method according to claim 34, wherein the fifth AVP is 
selectively invoked by the basestation to a network access server (NAS), which solicits 
an updated certificate from a third-party certification agency on behalf of and for delivery 
to the basestation. 

36. (New) The method of claim 31, wherein the first and second AVP follow 
a communication session of the wireless subscriber unit as it traverses through mobile 
communication link handoffs, the first and second AVP being used at least in part to 
implement mobility security features. 
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37. (New) A machine-readable medium having stored ihereoD instructions 
that when executed by a controller cause the control to perform operations comprising: 

sending a control command from a network element to initiate a wireless 
communication session of a wireless subscriber unit in a data network, the control 
command including a first mobility management attribute-value pair(s) (A VP) to 
facilitate exchange of mobility information in the data network indicating whether a call 
is a new call or a handover; 

receiving a control command from a network element to initiate the wireless 
communication session, the control command including a second AVP indicating a 
cookie-based session identifier and a third AVP indicating a security module-generated 
session identifier to facilitate secure mobility of wireless communication sessions. 

38. (New) The medium of claim 36, wherein the first and second AVP follow 
a communication session of the wireless subscriber unit as it traverses through mobile 
communication link handoffs. the first and second AVP being used at least in part to 
implement mobility security features. 

39. (New) The medium of claim 36, wherein the first and second AVPs are 
used to authenticate a mobile communication link handoff. 

40. (New) A medium according to claim 36, wherein the second AVP 
communicates a deterministic element of the communication session tD between one or 
more elements of a point-to-point communication session. 

41 . (New) A medium according to claim 40, wherein the second AVP 
communicates a random element of the communication session ID between one or more 
elements of a point-to-point communication session. 
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